General
- Target phishing.exe
- Size 37KB
- Sample260705-dmgfxacw2p
- SHA256 bace114ab587463115beee2b39ca570082a226fb8977abc9419493921c058383
- MD5 534de6a1077c5a0074bebc1ccbd52f24
- SHA1 c9c5b30cbd35b8391ff1245295aa34239d3245a3
- SHA512 95770bbd57f2cc90ef0d797cadedbad2ebd378170b61e755b47419628e236849a972421ff57e9b428b688e416c37029a143da97e9913bd366d03ce3935370ea8
- SSDEEP 384:v/uBZsiDtT95hL5YyUvrZvZO64aiTPArAF+rMRTyN/0L+EcoinblneHQM3epzXe+:4fv5zUvrZj1ibArM+rMRa8NuwKt
- TLSH T15E033A4D7FE1816CC5FE457B06B2D01207BAE04F6E23D91E8EE5649A37636C48B50AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
phishing.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
phishing.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
im523
Botnet
-
HacKed
C2
-
phishing.sales-tracker.io:443
Mutex
-
f063cd7155ce5f64f152f0abf44a82a8
Attributes
-
reg_key
f063cd7155ce5f64f152f0abf44a82a8
-
splitter
|'|'|
Targets
-
- Target phishing.exe
- Size 37KB
- SHA256 bace114ab587463115beee2b39ca570082a226fb8977abc9419493921c058383
- MD5 534de6a1077c5a0074bebc1ccbd52f24
- SHA1 c9c5b30cbd35b8391ff1245295aa34239d3245a3
- SHA512 95770bbd57f2cc90ef0d797cadedbad2ebd378170b61e755b47419628e236849a972421ff57e9b428b688e416c37029a143da97e9913bd366d03ce3935370ea8
- SSDEEP 384:v/uBZsiDtT95hL5YyUvrZvZO64aiTPArAF+rMRTyN/0L+EcoinblneHQM3epzXe+:4fv5zUvrZj1ibArM+rMRa8NuwKt
- TLSH T15E033A4D7FE1816CC5FE457B06B2D01207BAE04F6E23D91E8EE5649A37636C48B50AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall